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(54) Rngerprint actuation of customized vehicle features 

(57) Apparatus, and a corresponding method for its 
use, for gaining access to and operating a vehide. such 
as a car (10), by means of at least one fingerprint sen- 
sor (16) installed inside the vehicle at a convenient loca- 
tion and. optionally, outside the vehicle (at 14), in or 
near a door handle (12). Once an authorized user's 
identify has been verified in a fingerprint matching 
device (30). various vehicle subsystems are automati- 
cally adjusted to the identified user's preferred settings, 
which are stored in a memory (98). In addition, starting 
the vehicle engine is enabled if an interior fingerprint 
sensor has been used, or the vehicle Is unlocked if an 
exterior fingerprint sensor has been used. Vehicle sub- 
systems that are automatically adjusted to the user pref- 
erences include seats (38), mirrors (40), steering wheel 
(42). climate control (44). airbag (52), telephone (46). 
radio (50) and onboard computer (54). as well as per- 
fornDance control features (48) such as suspension and 
transmission adjustment. Door locks (34) and security 
system features (36) are also automatically controlled, 
as is a radio transmitter (56) that is automatically cus- 
tomized to open the user's home garage door or office 
parking entry gate. Features of a number of different fin- 
gerprints are stored in the device to allow for operation 
of the vehicle (10) by different family members, as 
authorized by a primary user. 
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Description 

BACKGROUND OF THE INVENTION 

[0001 ] The present invention relates generally to per- s 
sonal identification or vertfication systenis and. more 
particularly, to systems that autoniaticaily verify a per- 
son's identity before granting access to a vehicle. Tradi- 
tionally, keys and locks, or combination locks, have 
been used to limit access to property, on the theory that 10 
only persons with a right to access the property will 
have the required key or combination. This traditional 
approach is, of course, still widely used to limit access 
to a variety of enclosed spaces, including automobiles. 
[0002] Many automobiles are protected both by locks is 
and by intrusion alarms, which are typically activated 
and deactivated using a small radio or infrared trai^mit- 
ter carried by the car owner as a key-chain fob. Although 
this type of device is convenient, its loss by the owner 
may render the vehicle just as vulnerat^e to theft as if 20 
mechanical keys had been used for protection. 
[0003] Access to automobiles poses some special 
problems that have not been addressed by presently 
available security systems. Although fobs are widely 
used to transmit signals to a car security system, for ss 
door access and to activate and deactivate intrusion 
alarms, once in the car a car owner or user must typi- 
cally resort to a mechanical key to start the car. Moreo- 
ver, selection of customized features of the car, such as 
seat and mirror adjustments, must be made manually, so 
although some cars include a mechanism for memoriz- 
ing settings of the some of the vehicle's main features. 
[0004] Accordingly, there is a widely felt need for a 
more reliable technique for accessing and using auto- 
mobiles. Ideally, the technique should positively verify ss 
the identity of the person seeking access, should pro- 
vide access to all the car's features, and should elimi- 
nate the need to can^ multiple keys and fobs, or to 
memorize combinations or passwords Another desira- 
ble goal is that the technique should operate rapidly 40 
enough that it does not significantly delay a person's 
access to and use of the vehicle. The present invention 
satisfies all of these needs. 

SUMMARY OF THE INVENTION 45 

[0005] The present invention resides in apparatus, 
and a method for its use, for automatically verifying the 
identity of a person seeking entry to and use of a pro- 
tected vehicle. Briefly, and In general terms, the appara- so 
tus of the present invention comprises a fingerprint 
sensor mounted in a convenient interior tocation in a 
vehicle; a high-speed fingerprint matcher, for comparing 
a sensed fingerprint image with features of a previoudy 
stored reference fingerprint image, to verify the identity ss 
of a user of the vehicle; a fingerprint match controller, for 
selecting from a plurality of stored reference fingerprint 
images for presentation to the fingerprint nr«tcher, and 




having a locked mode or operation and an unlocked 
mode of operation; an engine enabling switdi, to pre- 
vent operation of the vehicle in the locked nrxxJe; means 
included in the fingerprint match controller, for switching 
from the locked mode to the unlocked mode upon suc- 
cessfully verifying the identity of a vehicle user; means 
operable in the unlocked mode, for actuating the engine 
enabling switch to allow operation of the vehicle; one or 
more actuators for adjusting vehicle subsystems in 
accordance with users* prefen'ed settings; storage 
means for recording actuator settings associated with 
user identtties; and means operable in the unlocked 
mode, for operating the actuators based on settings 
retrieved from the storage means for an identified user. 
[0006] More specifically, the actuators may include a 
seat adjustnnent actuator, a mirror actuator, a steering 
wheel position actuator, a climate control actuator, a 
mobile tel^one actuator, a vehicle performance con- 
trol actuator, an entertainment device actuator, an air- 
bag setting actuator, and an onboard computer 
actuator. 

[0007] The iliustrative embodiment of the invention 
also includes a second fingerprint sensor, mounted in a 
convenient exterior location on the vehicle. The finger- 
print matching controller includes means for determin- 
ing which fingerprint sensor has been used, and means 
for xmlocking at least one vehicle passenger access 
door upon verification of the identity of a user placing a 
linger in the second fingerprint sensor. Preferably, the 
second fingerprint sensor is located near, or integrated 
into a door handle, for ease of operation while opening 
adoorofthe vehida 

[0008] The apparatus also includes means for switch- 
ing from the unlocked mode to the locked mode upon 
detection of engine non-operation for a selected period 
of time. Thus, the vehicle may be driven, and even 
restarted after an engine stall, without further identity 
verification, but will return to the locked mode once the 
engine has been shut down for a short time, such as a 
minute or two. 

[0009] Ideally, the apparatus of the invention also 
includes a user interface for selection of modes of oper- 
ation and user identities. An authorized user can speed 
up the verification process by manually selecting his or 
her own identity in the user interface, so that only one 
fingerprint matching operation is needed. An authorized 
user may also select a new mode of operation at the 
user interface. The fingerprint match controller will auto- 
matically switch to a new selected mode of operation 
immediately upon verification of the identity of a user. 
1001 0] Among the modes of operation that may be 
selected by a primary user are a "set" mode that permits 
eiff oii menl of additional users. For this purpose, the 
apparatus furtiier conprises means for obtaining and 
storing reference fingerprint in^ge data pertaining to 
additional users. Another mode that may be selected is 
a "guest," mode that permits operation of the vehicle 
without fingerprint verification. Any enrolled user may 



2 



3 EP0 924 

request transition to or from the guest^lfee upon iden- 
tity verification. 

[001 1 ] Another mode that may be selected by the pri- 
mary user of the vehicle is the "combination" mode, 
which permits operation of the vehicle without finger- 5 
print verification, but using a secret combination. 
[0012] The apparatus of the invention may also be 
defined as comprising a fingerprint matching system for 
verifying the identity of a person who wishes to use the 
vehicle; an engine enabling switch coupled to the finger- io 
print matching system, to prevent operation of the vehi- 
cle until the identity of the person has been verified; and 
at least one actuator for adjusting a vehicle subsystem 
to an individually preferred setting. The fingerprint 
matching system includes means, operable upon sue- 75 
cessful verification of a user's identity, for retrieving per- 
sonal preference data associated with the identified 
user and for supplying selected personal preference 
data to the actuator, for automatic adjustment of the 
vehicle subsystem to the user's preference. 20 
[001 3] The invention may also be defined in terms of 
a method for controlling a vehicle using fingerprint iden- 
tification, the method conprising the steps of sensing a 
vehicle user's fingerprint image in a fingerprint sensor 
mounted in a convenient location in the vehicle; select- 25 
ing from a plurality of previously stored reference finger- 
print images of authorized users of the vehicle; 
comparing the sensed fingerprint image with features of 
the selected previously stored reference fingerprint 
image of an authorized user of the vehicle; verifying, in 30 
a fingerprint matching system, that the sensed finger- 
print image matches the selected reference image; 
upon verification in the previous step, switching the fin- 
gerprint matching system from a locked mode to an 
unlocked mode and enabling operation of the vehicle; 35 
and actuating at least one vehicle subsystem to con- 
form with adjustment settings associated with the iden- 
tified vehicle user. 

[001 4] The method may further comprise the steps of 
switching the fingerprint matching system to a guest 40 
mode upon verification of an authorized user's finger- 
print, wherein any driver may operate the vehicle while 
in guest mode; and switching the fingenDrint matching 
system back to the unlocked mode upon obtaining 
another verification of an authorized user. Further steps 45 
of the method include sensing when the vehicle engine 
has been inactive for a prescribed period of time; and 
then automatically switching the fingerprint matching 
system back to the locked mode. 
[0015] The method may also include the steps of so 
switching the fingerprint matching system to a "set" 
mode if requested by a primary authorized user; and 
enrolling additional users in the set mode, by analyzing 
and storing fingerprint features of the additional users. 
The method may then include unenrolling selected ss 
users by removing their stored fingerprint features. 
Unenrollment of the primary authorized user places the 
fingerprint matching system in a cleared mode in which 
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no fingerprint matching is^^iied to operate the vehi- 
cle. 

[0016] In accordance with another feature of the 
invention, the method further comprises the step of 
switching the fingerprint matching system to a combina- 
tion mode if requested by a primary authorized user. 
Operation of the vehicle in the combination mode does 
not require fingerprint matching but does require the 
use of a secret combination. Leaving the combination 
mode requires tiie further step of switching tiie finger- 
print matching system from the combination mode to 
the unlocked mode upon anotiier verification of the pri- 
mary user's identity in the fingerprint matching system. 
[0017] Finally, the metiiod may also include the step 
of recording usage data pertaining to the identified 
users and selected parameters of vehicle operation. 
[0018] It will be appreciated from the foregoing tiiat 
tiie present invention represents a significant advance 
in providing secure access to vehicles. Mae particu- 
larly, the invention allows multiple users to gain entry to 
a vehicle and to have selected vehicle subsystem set- 
tings adjusted to personal preferences automatically 
Each authorized user enrolls at least one fingerprint in 
the apparatus of the invention. Then, upon entering or 
starting tiie vehicle, an autiiorized user has only to 
touch a fingerprint sensor and the vehicle will be auto- 
matically adjusted to preferred settings tiiat were saved 
when the user last operated the vehicle. Other aspects 
and advantages of tiie invention will become apparent 
from the following more detailed description, taken in 
conjunction with tiie accompanying drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0019] 

FIG. 1 is a fragmentary elevation view of a car. 
showing one location of an exterior fingerprint sen- 
sor used in the present invention; 
FIG. 2 is a view similar to FIG. 1, but showing an 
alternative location for a fingerprint sensor, inte- 
grated into a door handle; 
FIG. 3 is an enlarged view of tiie door handle 
shown in FIG. 2; 

RG. 4 is a simplified fragmentary perspective draw- 
ing of a car interior, showing alternative locations 
for an interior fingerprint sensor used in the present 
invention; 

FIG. 5 is a block diagram showing the principal fea- 
tures and functions of tiie present invention; 
FIG. 6 is block diagram showing a fingerprint match 
controller and other hardware components of the 
present invention; 

FIG. 7 is a state diagram depicting the various 
modes of operation of the fingerprint match control- 
ler of FIG. 6. and showing the conditions needed to 
effect transitions between different pairs of modes; 
FIG. 8 is a flowchart showing functions performed 
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by the fingerprint match controller during verifica- 
tion of a fingerprint image; and 
FIG. 9 is a flowchart showing functions performed 
by the fingerprint match controller in an unlocked 
mode of operation. 

DESCRIPTION OF THE PREFERRED EMBODI- 
MENTS 

[0020] As shown in the drawings for purposes of illus- 
tration, the present invention pertains to a system for 
automatic verification of the identity of a person seeking 
to enter and operate a car. Traditionally, cars are pro- 
tected by mechanical locks and keys, or by combination 
locks or electronic devices, such as hand-held fobs. 
[00211 In accordance with the present inverrtion, the 
person seeking access to a car, or wanting to start the 
car. does so by first placing a finger over a conveniently 
located sensor. The car user's fingerprint image is 
employed to control access though the car doors, to 
unlock the car engine, and to customize a number of car 
subsystem features automatically to the personal pref- 
erence of the user. FIG. 1 is an exterior view of part of a 
car, indicated by reference numeral 10, having a door 
handle 12 and a fingerprint sensor 14 located adjacent 
to the door handle. The user gains access to the car 10 
by placing a finger, such as the index finger, momentar- 
ily on the sensor 14. As will be discussed in more detail, 
the system of the invention has the ability to verify the 
identity of the user very rapidly, and to unlock the door 
(or all doors) upon conpletion of the verrf ication proc- 
ess. 

[0022] FIG. 2 is similar to FIG. 1 , but shows an alter- 
native location for the sensor 14. on the underside of the 
door handle 12, as best shown in FIG. 3. This approach 
works best for door handles of the recessed type that 
have to be pivoted out of a recess by placing a finger 
beneath the handle and pulling it out 
[0023] FIG. 4 shows four possible locations for an inte- 
rior sensor 16: (a) near the position of a conventional 
ignition key switch on the car steering column 18, as 
indicated at 16a, (b) on the car dashboard 20, such as 
shown at 16b, (c), on the central console 22. as indi- 
cated at 16c. or (d) on a centrally mounted parking 
brake lever 24. as indicated at 16d. 
[0024] FIG. 5 shows the principal functions controlled 
in association with the fingerprint sensors 14 and 16, 
both of which are connected to a fingerprint matching 
device 30 in the car 10. The fingerprint matching device 
30 matches the fingerprint image obtained by one of the 
sensors with one or more internally stored reference fin- 
gerprint images obtained from the principal car user and 
a number of other frequent users who wish to be 
enrolled to use the car. if a match is determined, the fin- 
gerprint matching device 30 transmits control signals to 
a number of car subsystems. Principal among these 
subsystems is an engine control switch 32 and a door 
locking switch 34. It will be understood that, for most 




cars, the exterior fingerprint sensor 14 will be used to 
unlock the car and to disable a security system 36. but 
not to enable the engine control switch 32. One 
approach for accomplishing a division of functions 
5 between the exterior and interior sensors 14 and 16 is 
further discussed below. 

[0025] In addition to the more essential functions of 
engine enabling, door unlocking and control of security 
alarms, the fingerprint matching device 30 also per- 
10 forms a number of control functions that customize the 
car for the user whose identity has been verified. Thi^. 
as soon as the driver's identity has been verified 
through one of the sensors 14 or 16, actuator control 
signals are transmitted to the car seats 38. mirrors 40, 

15 steering wheel 42, climate control 44, mobile telephone 
46. vehicle performance controls 48, entertainment 
center 50, airbag controls 52, in-car computer 54. and 
radio transmitter 56. The seats, minors, steering wheel, 
climate control and airt>ag control are adjusted to the 

20 settings preferred by the identified user. In the case of 
the airbag controls 52, adjustment is made on the basis 
of the user's previously sensed weight, height, or both. 
These and other adjustments are made on the basis of 
positional settings that were memorized when the same 

25 user last drove the car. Performance controls may 
include suspension and transmission settings that were 
either previously selected by the user or were stored 
after automatically adjusting to the user's weight or 
other characteristics. 

30 [0026] The entertainment center adjustments 50 
include preset stations stored by user when previously 
in the car, and a selection of conpact disks or other 
music media previously selected. If the user is new to 
the car. no settings will be available but selections made 

35 while operating the vehicle will be stored for use when 
the same user drives on a later occasion. The mobile 
telephone controls 46 make an appropriate selection of 
a telephone account for the user, and retrieve a list of 
speed-dial numbers previously stored by the user. 

40 [0027] The radio transmitter controls 56 are used to 
enable a transmitter for opening a home garage door, as 
indicated at 58, or an office parking access gate, as indi- 
cated at 60. Since each user may have different require- 
ments in this regard, customized frequencies or control 

45 signals are stored for each i^er. Programming these 
selections into the system is accomplished either by 
manually entering the data or by utilizing a draining" 
mode in which signals from each user's separate 
garage door opener and parking gate opener or trans- 

50 ponder are captured and analyzed. 

[0028] If the car has an onboard computer 54, the 
user's verified identity may be used to log in automati- 
cally, to fetch any electronic mail (e-mail), to retrieve the 
user's appointment book, navigation system prefer- 

55 ences. and speech profile (to condition the computer to 
accept voice commands from the user). The user's per- 
sonal preferences for subscription data services may 
also be initialized in the computer, such as data sub- 
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scriptions to services pertaining to^Blfic. weather, 
stocks, news, or sports. 

[0029] FIG. 6 shows the principal hardware conpo- 
nents of the fingerprint checking device 30. The finger- 
print sensors 14 and 16 interface with a fingerprint s 
match controller 70, the structure and function of which 
will be described with reference to FIGS. 7-9. The con- 
troller 70 receives fingerprint image data over lines 72 
and 74 from the sensors 14 and 16, and transmits con- 
trol signals to the sensors over lines 76 and 78, respec- io 
tively. The fingerprint matching device 30 also includes 
a user interface 80, which is coupled to the controller 70 
over lines 82. The specific structure of the interface 80 
is not critical to the invention. It may, for exanple. 
include a snrall display screen and a control panel for is 
the selection of a mode of operation and an enrolled 
user name. As will be discussed with reference to FIG. 
7, a user may select a mode of operation on the user 
interface 80, and then render that mode active by plac- 
ing a finger on one of the sensors 1 4 and 1 6 for identity 20 
verification. 

[0030] An important conponent of the fingerprint 
matching device 30 is a fingerprint correlator 84. In an 
enroll mode of correlator operation, the sensed finger- 
print image, on line 86. is processed to extract distinc- 25 
five features of the image, which are transmitted over 
line 88 to a reference fingerprint memory 90. In a verifi- 
cation mode of operation, the correlator 84 compares a 
fingerprint image received over line 86 with the finger- 
print features stored in the memory 90 and transmitted 30 
to the correlator over line 92. The result of the con-ela- 
tion process is simply a match or no-match signal on 
line 94, which is coupled back to the fingerprint match 
controller 70. 

[0031] The fingerprint correlator 84 performs the 35 
matching function very rapidly by using specialisurpose 
hardware in the fbmi of an application-specific inte- 
grated circuit (ASIC), which employs a high degree of 
parallel processing to search an entire fingerprint image 
for instances of distinctive reference features that have 40 
been previously stored in the memory 90. A specific 
form of the fingerprint con-elator that can achieve the 
desired speed of matching is disclosed in a patent appli- 
cation by Bruce W. Evans et al., entitled "Fingerprint 
Feature Con-elator." filed concurrently with this applica- 45 
tion. The Evans et al. patent application is hereby incor- 
porated by reference into this specification. A con-elator 
constructed in accordance with the principles described 
in the Evans et al. specification is capable of verifying a 
user's identity in less than a second, and closer to half a so 
second if only one reference fingerprint image has to be 
compared with a sensed fingerprint image. The match- 
ing process can be easily arranged such that, in most 
cases, only one comparison is needed, since the user's 
identity is usually known in advance. ss 
[0032] When a user's identity has been verified by the 
fingerprint correlator 84, the fingerprint match controller 
70 issues appropriate commands to an interface 96 with 



3n^^^d 



various actuators and conflWf described with reference 
to FIG. 5. Actuator settings are retrieved from a memory 
98 and used to generate these commands. 
[0033] The structure and operation of the fingerprint 
match controller 70 is best illustrated in the form of a 
state diagram, as shown in FIG. 7. The state diagram 
shows (as circles) the principal operational modes or 
states of the controller 70 and the conditions needed to 
effect transfers from one state to another. The condi- 
tions are described in text associated with each transi- 
tion line from one state to another. The two principal 
states of the controller 70 are the locked mode 100 and 
the unlocked mode 102. In the locked mode, the car's 
conventional ignition key switch (not shown) is disabled 
by another, series-connected, switch controlled by the 
fingerprint matching device. In the locked mode, the 
doors may be either locked or unlocked. The car cannot 
be started in the locked mode 100 until the identity of an 
enrolled user is verified by the system. In the unlocked 
mode 102. the engine or ignition switch is enabled and 
the engine may be started by turning the ignition key or 
other device used for this purpose. To make the transi- 
tion from locked to unlocked mode, a user first selects 
his or her enrolled identity on the user interface 80, and 
then places a finger over the interior sensor 16. If the 
exterior sensor 14 is used, the user cannot access the 
user interface, and sinply places a finger over the sen- 
sor to unlock the car and transition to the unlocked 
mode, but without the ability to start the car. As previ- 
ously mentioned, enabling starting the car still requires 
use of the interior sensor 16. but other user customiza- 
tion functions may be initiated from the external sensor 
14. Employing the user interface 80 to specify a user 
identity potentially speeds up the verification process 
because the fingerprint match controller 70 does not 
have to search through multiple reference fingerprint 
images to find one that matches this user 
[0034] in the unlocked mode 102, the car may be 
started and driven, and the various customization func- 
tions are performed to prepare the car for driving by the 
identified user. Transition back to the locked mode 100 
occurs when the engine has been shut off for some 
short period, such as a minute or two. Thus, temporary 
engine stalls do not prevent the user from driving the 
vehicle. 

[0035] When a car is first purchased, it is delivered in 
a "cleared" mode 104, in which the engine controls are 
not locked and the car may be driven and delivered 
using a conventional ignition key. When a first user is 
enrolled, that user is designated ttie primary user. His or 
her fingerprint features are stored as the primary user's 
and the controller 70 assumes the unlocked mode 102. 
Enrollment includes the recording of the fingerprints of 
two fingers, preferably the index and ring fingers of the 
right hand. The second fingerprint serves as a back-up 
feature, for use if a finger is injured or, for some reason, 
is ineffective in attenpting to access or drive the car. 
[0036] The primary user may enroll others to be 
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authorized to drive the car. The enrollment process is 
started by selecting a "set" mode in the user interface 
and having the primary user place his or her finger on 
the sensor. In the set mode 106, other users, such as 
family members of the primary user, may have their fin- 
gerprints analyzed and recorded. Users may also be 
unenrolled in the set mode of operation. After enroll- 
ment, any of these additional users may enter and start 
the car with the same authority as the primary user. The 
primary user, however, has some addrtiona! powers that 
the additional users do not have. The primary user may 
select a combination mode 108 in the user interface 80 
and. after fingerprint verification of the primary user, the 
controller 70 enters the combination mode. In this 
mode, which is useful for granting temporary, but still 
secured, access to an unenrolled driver, the unlocked 
mode 102 can only be reached by dialing a secret com- 
bination at the ignition switch. The primary user can dis- 
able the combination mode 108 and go to the unlocked 
mode 102. upon fingerprint verification, and can also 
change the secret combination (not shown in FIG. 7). 
[0037] The primary user is also the only one who can 
enter the set mode 106 and the only one who can enter 
the cleared mode 104. 

[0038] For additional security, there is a "safe" mode 
110. which is entered upon detection of tampering in 
any mode of operation. The safe mode is aiso a k)cked 
mode. Exit from the safe mode 110 may be made only 
upon dialing a secret combination, which effects a tran- 
sition to the cleared mode 104. 
[0039] Finally, there is a "guest" mode of operation 
112. which is similar in some respects to the unlodced 
mode 102. More precisely, guest mode is one that ena- 
tAes conventional operation with an ignition key. There is 
no reversion to locked mode when the engine is shut off. 
and no customized user features are retrieved or stored 
while the guest is driving. Guest mode is appropriate 
when handing over the car to a valet parking attendant 
or to a garage mechanic. Any enrolled user may enter 
guest mode by selecting the mode on the user interface 
80 and having his or her fingerprint verified. Guest 
mode is turned off by selecting a user identity on the 
user interface 80 and having the user fingerprint veri- 
fied. 

[0040] The process of identity verification, as per- 
formed by the fingerprint match controller 70, is defined 
by the flowchart of FIG. 8. The first st^. as rolicatedin 
block 120. is to select the next most likely reference fin- 
gerprint to compare with the one tjeing sensed. If the 
user interface 80 is set to a specific user identity, then 
that identity is used to access the reference data stored 
in the memory 90. If no WenSty is specified by *e user 
interface 80. either because the exterior sensor 14 is 
being used, or the user has not correctly acfjusted the 
interface, or the system does not make use of the user 
interface, then the next most likely fingerprint is selected 
as indicated in table 122. Any of variois user options 
may be used to obtain a fingerprint preference Rst In 




option A, the verification process first selects the last 
user's reference fingerprint data If no match is found, 
the process selects the primary user's reference finger- 
print data, if that. too. does not produce a match, addi- 

5 tionat users' reference fingerprint data are selected in a 
sequence that may be specified by the principal i^er. In 
option B. the primary users fingerprint data are the first 
choice and the previous usefs identity is ignored In 
option C. the primary and last users* identities are both 

10 ignored and all users are scanned in a selected 
sequence. When a reference fingerprint has been 
selected, the fingerprint correlator is activated, as indi- 
cated in block 124. using the selected reference data 
and the fingerprint image obtained from one of the sen- 

15 sors14and16. 

[0041] In most cases, verification will accomplished in 
the shortest possible time because the identity of the 
user is already known, either because the user selects 
his or her name in the user interface 80 before verifica- 

20 tion. or because the user is the principal user or the last 
user of the vehicle. When a new user approaches the 
vehicle and seeks entry using the exterior fingerprint 
sensor 14, there may be a slight delay while multiple 
comparisons are performed, but the delay will be 

25 avoided once the new user has entered the vehicle and 
adjusted the user interface 80 to reflect his or her iden- 
tity. 

[0042] If the fingerprint correlator 84 (FIG. 6) does not 
find a match, as determined in decision block 126. the 

30 verification process may be repeated using reference 
data from a different fingerprint of the same person. If 
this is done without success, as determined in decision 
block 128. the process may be repeated again using ref- 
erence fingerprint data from other persons, in accord- 

35 ance with one of the options shown in table 122. For 
some applications of the verification process, only the 
primary user may participate, in which case, there will 
be no need to attempt verification using other enrolled 
users' fingerprint reference data. In any event, when all 

40 permissible fingerprint reference data have been 
checked, as determined in decision block 130, access 
will be denied, as indicated in terminal block 132. 
[0043] When a match is determined by the correlator 
84. as discovered in decision block 126. a further dis- 

45 tinction is made if the exterior sensor 1 4 was used in the 
verification process. As presently contemplated, the 
invention does not permit all types of mode transitions 
to be effected from the exterior sensor 14. Thus, if deci- 
sion block 134 determines that the exterior sensor 14 

so was used, only a transition from the locked mode 1 00 to 
the unlocked mode 1 02 will be permitted, as indicated in 
terminal block 136. and access will be denied for other 
purposes. If the interior sensor 16 is used, the selected 
mode will be entered, as indicated in terminal block 138. 

& [0044] When entering the unlocked mode 102, the 
functions performed are those illustrated in FIG. 9. First, 
a distinction is again made between functions initiated 
from the exterior or door sensor 14 and those initiated 



6 



11 



EP 0 924 123 A2 



from the interior sensor 16. as deternttT&d in decision 
block 140. When the door sensor 14 is used, the oon- 
trolier 70 automatically unlocks the doors, as indicated 
in block 142. and turns off the alarm system, as indi- 
cated in block 144. If the unlocked mode is entered 5 
when the user is in the car. the first step is to unlock the 
engine, as indicated in block 146, and, optionally, to lock 
the doors, as indicated in block 148. Th^, regardless of 
which sensor was used, the controller 70 retrieves actu- 
ator settings from memory 98 (FIG. 6). as indicated in w 
block 150, and customizes all vehicle siteystem set- 
tings for the identified user, as indicated in block 152. 
Thus, all of the user's personal settings are conveniently 
restored when the driver enters or starts the car The 
controller 70 remains in the unlocked mode and enters is 
a "steep" status temporarily, at least as ter as the user 
interface is concerned. 

[0045] As indicated in decision block 1 54, the control- 
ler 70 in the unlocked mode is continually checking for 
departure from this mode. This is typically initiated by 20 
engine shut-off for a selected time period, such as a 
minute. If this event is detected, the engine is locked, as 
indicated in block 156. and all actuator settings are 
saved in memory 90 (FIG. 6). as indicated in block 158. 
Finally, a usage log is updated, as indicated in block 1 60 25 
and the locked mode 100 is entered. The usage log is a 
maintained record of car usage on a user-by-user basis. 
Similar to a flight recorder on an aircraft, the usage log 
records selected vehicle parameters and the times of 
use by each user. Optionally, the usage log may record 30 
speed, distance driven, fuel consumed and other per- 
formance data obtained from an engine computer in the 
car. 

[0046] It will be appreciated from the foregoing that 
the present invention represents a significant advance 35 
in the field of secured access to cars and other vehicles. 
In particular, the invention conditions access and use of 
a car on successful kJentity verification using fingerprint 
images. Moreover, once a user's identity is verified, a 
full range of convenience features of the car are auto* 40 
matically adjusted to the user's personal preferences. It 
will also be appreciated that, although a specific embod- 
iment of the invention has been described in detail for 
purposes of illustration, varfous modifications may be 
made without departing from the spirit and scope of the 45 
invention. For exanrple, ft will be apparent that the prin- 
ciples of the invention may be easily adapted for use in 
a vehicle that uses a different biometric feature of the 
human body for identification purposes. The invention 
should not, therefore, be limited except as by the so 
accompanying claims. 

Claims 

1 ■ Apparatus for controlling a vehicle using fingerprint ss 
matching, the apparatus comprising: 

a fingerprint sensor mounted in a convenient 



2. 



12 

interior location ir^lfehicle; 

a high-speed fingerprint matcher, for compar- 
ing a sensed fingerprint image with features of 
a previously stored reference fingerprint image, 
to verify the identity of a user of the vehicle; 
a fingerprint match controller, for selecting from 
a pluralfty of stored reference fingerprint 
images for presentation to the fingerprint 
matcher, and having a locked mode or opera- 
tion and an unlocked mode of operation; 
an engine enabling switch, to prevent operation 
of the vehicle in the locked mode; 
means included in the fingerprint match con- 
troller, for switching from the locked mode to 
the unlocked mode upon successfully verifying 
the identity of a vehicle user; 
means operable in the unlocked mode, for 
actuating the engine enabling switch to allow 
operation of the vehicle; 
at least one actuator for adjusting a vehicle 
subsystem in accordance wfth users preferred 
settings; 

storage means for recording actuator settings 
associated with user identities; and 
means operable in the unlocked mode, for 
operating the actuator based on settings 
retrieved from the storage means for an identi- 
fied user. 



Apparatus as defined in claim 1, wherein the at 
least one actuator is selected from the group com- 
prising: a seat adjustment actuator, a mirror actua- 
tor, a steering wheel position actuator, a climate 
control actuator, a mobile telephone actuator, a 
vehicle performance control actuator, an entertain- 
ment device actuator, an airbag setting actuator, 
and an onboard computer actuator; and/or 

said apparatus further comprising: 
a second fingerprint sensor, mounted in a con- 
venient exterior location on the vehicle; and 
means for determining which fingerprint sensor 
has been used; and 

means included in the fingerprint match con- 
troller, for unlocking at least one vehicle pas- 
senger access door upon verification of the 
identfty of a user placing a finger in the second 
fingerprint sensor and 

wherein the second fingerprint sensor is prefer- 
ably integrated into a door handle, for operation 
while opening a door of the vehicle; and/or 
said apparatus further comprising: 
means included in the fingerprint match con- 
troller, for switching from the unlocked mode to 
the locked mode upon detection of engine non- 
operation for a selected period of time; and/or 
further comprising: 

a user interface for selection of nrKxies of oper- 
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ation and user identities; and means included 
in the fingerprint match controller, for switching 
to a new selected mode of operation upon ver- 5 
ification of the identity of a user. 

5 

Apparatus as defined in claim 2, wherein: 

tiie selected mode is a "set" mode that permits 
enrollment of additional users; and 
the apparatus further comprises means 10 
included in the fingerprint match controller, for 
obtaining and storing reference fingerprint 
image data pertaining to additional users, 
and/or wherein: 

the selected mode is a "guest" mode that per- is 
mits operation of the vehicle without fingerprint 
verification; and 

any enrolled user can request transition to and 
from the guest mode upon identity verification: 
and/or wherein: 20 
the selected mode is a "combination" mode 
that permits operation of the vehicle with a 
secret connbination; and 
only one user can request transition to and 
from the combination mode. 25 

6. 

Apparatus for controlling a vehicle using fingerprint 
matching, the apparatus comprising: 

a first fingerprint sensor mounted in a conven- 30 
lent interior location In a vehicle; 
a second fingerprint sensor mounted in a con- 
venient exterior location of the vehicle; 
a high-speed fingerprint matcher, for compar- 
ing a sensed fingerprint image with features of 35 
a previously stored reference fingerprint image, 
to verify the identity of a user of the vehicle; 
means for storing selected features of the plu- 
rality of reference fingerprint images obtained 
from enrolled users of tiie vehicle; 40 
a fingerprint match conti-oller, for selecting from 
the plurality of stored reference fingerprint 
images for presentation to the fingerprint 
matcher, and having a locked mode or opera- 
tion and an unlocked mode of operation; 45 
an engine enabling switch, to prevent operation 
of ttie vehicle in tiie locked mode; 
means included in the fingerprint match con- 
troller, for switching from tiie locked mode to 
tiie unlocked mode upon successfully verifying so 
the identity of a vehicle user whose fingerprint 
is sensed; 

means operable in the unlocked mode, for 
actuating the engine enabling switch to allow 
operation of the vehicle if tiie fingerprint was ss 
sensed by tiie first fingerprint sensor; and 7. 
means operable in the unlocked mode, for 
unlocking at least vehicle door if the fingerprint 



was sensed by the second fingerprint sensor. 

Apparatus as defined in claim 4, and further com- 
prising: 

at least one actuator for adjusting a vehicle 
subsystem to meet a user's preferences; 
storage means for recording actuator settings 
associated with user identities; and 
means operable in the unlocked mode, for 
operating tiie at least one actuator in accord- 
ance witii actuator settings retrieved from tiie 
storage means for an identified user; and/or 
f urtiier comprising: 

means included in the fingerprint match con- 
troller, for switching from the unlocked mode to 
the locked mode upon detection of engine non- 
operation for a selected period of time; and/or 
further comprising: 

a user interface for selection of modes of oper- 
ation and user identities; and means included 
in the fingerprint match controller, for switching 
to a new selected mode of operation upon ver- 
ification of the identity of a user. 

Apparatus as defined in claim 5, wherein tiie at 
least one actuator is selected from the group com- 
prising: a seat adjustment actuator, a minor actua- 
tor, a steering wheel position actuator, a climate 
conti'ol actuator, a mobile telephone actuator, a 
vehicle performance control actuator, an entertain- 
ment device actuator, an airbag setting actuator, 
and an onboard computer actuator; and/or 

the selected mode is a "set" mode that permits 

enrollment of additional users; and 

the apparatus furtiier comprises means 

included in tiie fingerprint match controller, for 

obtaining and storing reference fingerprint 

image data pertaining to additional users; 

and/or 

wherein: 

the selected mode is a "guest" mode that per- 
mits operation of tiie vehicle witiiout fingerprint 
verification; and 

any enrolled user can request transition to and 
from tiie guest mode upon identity verification; 
and/or 
wherein: 

the selected mode is a "combination" mode 
that permits operation of the vehicle with a 
secret combination; and 
only a principal user can request transition to 
and from tiie combination mode. 

Apparatus for controlling a vehicle using fingerprint 
matching, tiie apparatus comprising: 
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a fingerprint matching systenWIf verifying the 
identity of a person who wishes to use the vehi- 
cle; 

an engine enabling switch coupled to the fin- 
gerprint matching system, to prevent operation s 
of the vehicle until the identity of the person has 
been verified; and at least one actuator for 
adjusting a vehicle subsystem to an individually 
preferred setting; 

wherein the fingerprint matching system io 
includes means operable upon successful veri- 
fication of a user's identity, for retrieving per- 
sonal preference data associated with the 
identified user and for supplying selected per- 
sonal preference data to the actuator, for auto- is 
matic adjustment of the vehicle suljsystem to 
the user's preference. 

8. A method for controlling a vehicle using fingerprint 
identification, the method conrprising the steps of: 20 

sensing a vehicle user's fingerprint image in a 
fingerprint sensor mounted in a convenient 
location in the vehicle; 

selecting from a plurality of previously stored 25 
reference fingerprint images of authorized 
users of the vehicle; 

comparing the sensed fingerprint image with 
features of the selected pre^^ously stored refer- 
ence fingerprint image of an authorized user of 30 
the vehicle; 

verifying, in a fingerprint matching system, that 
the sensed fingerprint image matches the 
selected reference image; 
upon verification in the previous step, switching 3s 
the fingerprint matching system from a locked 
mode to an unlocked mode and enabling oper- 
ation of the vehicle; and 
actuating at least one vehicle subsystem to 
conform with adjustment settings associated 40 
with the identified vehicle user. 



further comprising!! steps of: switching the 
fingerprint matching system to a "set" mode if 
requested by a primary authorized user; and 
enrolling additional users in the set mode, by 
analyzing and storing fingerprint features of the 
additional users; and/or 
further comprising the step of: 
switching the fingerprint matching system to a 
combination mode if requested by a primary 
authorized user, wherein operation of the vehi- 
cle In the combination mode requires the entry 
of a secret combination; and/or 
further comprising the step of: 
recording usage data pertaining the identified 
user and selected parameters of vehicle opera- 
tion. 

10. A method as defined in dalm 9, and further com- 
prising the step of: unenrolling selected users by 
removing their stored fingerprint features; and 
wherein preferably unenrollment of the primary 
authorized user places the fingerprint matching 
system in a cleared mode in which no fingerprint 
matching is needed to operate the vehicle: and/or 

further comprising the step of: 
switching the fingerprint matching system from 
the combination mode to the unlocked mode 
upon another verification of the primary user's 
identity in the fingerprint matching system. 



9- A method as defined in claim 8. and further com- 
prising the steps of: 

45 

switching the fingerprint matching system to a 
guest mode upon verification of an authorized 
user's fingerprint wherein any driver may oper- 
ate the vehicle while in guest mode; and 
switching the fingerprint matching system back so 
to the unlocked mode upon obtaining another 
verification of an authorized user; and/or 
further comprising the steps of: 
sensing when the vehicle engine has been 
inactive for a prescribed period of time; and 55 
then 

automatically switching the fingerprint match- 
ing system back to the locked mode: and/or 
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